Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: GIT7IoQK2X2ULBaaWYeA4gE/GcPwcwM40JdwqYFeubM=
Subject key identifier: 76:B9:BD:F1:F1:33:34:58:9D:04:DA:C2:38:E6:3C:CE:C4:D9:BE:63
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 01976D068F7399F67536CECBC77BFD0E0070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 06:00:35 +0000
Manifest this update: Sat 14 Jun 2025 06:00:35 +0000
Manifest next update: Sun 15 Jun 2025 06:00:35 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: cric/eQSkGbq6Qg6F3gCzzF+4Qk4eothcwTf0cx1lgc=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:8f:73:99:f6:75:36:ce:cb:c7:7b:fd:0e:00:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jun 14 06:00:35 2025 GMT
Not After : Jun 15 06:00:35 2025 GMT
Subject: CN=76b9bdf1f13334589d04dac238e63ccec4d9be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:27:45:76:4e:94:07:22:99:08:cc:e4:37:
57:f0:a0:44:c1:ca:63:3b:26:fa:3f:34:62:10:15:
fe:55:b0:19:d8:b6:82:ee:76:74:5d:02:e1:a3:08:
d1:87:75:90:d8:e2:a3:9f:1c:72:ff:15:b7:3a:8d:
f8:47:93:35:19:72:62:92:d9:97:84:8a:eb:76:08:
54:f2:e6:6b:41:e2:3d:fa:36:3e:c1:aa:a1:56:de:
34:4f:93:10:59:66:81:1c:81:35:30:d1:ab:b2:f8:
de:02:7e:6b:c7:94:4d:11:da:76:3c:68:f1:22:6e:
e2:46:dc:04:4b:c7:fe:63:a9:0f:81:d9:32:9e:27:
69:c0:4a:0f:39:87:d5:b0:c6:af:c3:f8:86:da:ed:
4c:c3:ab:91:00:7e:75:5d:27:8d:ca:57:1b:c7:b5:
e4:ac:24:54:7c:0c:82:ef:77:6a:54:a1:b1:ca:f3:
7a:fe:a8:49:3f:c6:3a:50:10:31:30:79:fd:a5:a0:
1b:a2:07:97:48:b6:cf:d6:bd:27:00:72:34:d8:80:
6d:bc:aa:53:27:de:af:02:c2:17:8e:87:72:15:d1:
47:f7:17:13:47:00:2c:59:22:7a:b3:78:59:7b:21:
00:e5:47:a2:f7:b3:a7:bf:eb:02:07:f0:d6:96:b4:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B9:BD:F1:F1:33:34:58:9D:04:DA:C2:38:E6:3C:CE:C4:D9:BE:63
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d8:d5:50:66:83:69:b3:3e:0b:9e:aa:e9:92:ef:58:fa:73:
9a:5e:af:9a:af:73:d9:c2:8e:a8:16:8b:65:b5:f3:c7:f7:8b:
d6:db:c2:a4:f7:89:ae:33:81:d9:91:af:25:a5:07:e6:65:e1:
26:86:32:3c:fd:45:e8:fb:0c:00:4b:45:50:8a:73:af:9c:9f:
a9:44:fb:0c:f3:a7:c8:47:19:26:31:ce:a3:ed:7a:dc:e9:32:
a9:bf:63:77:4f:2f:63:ef:b8:a4:d4:58:08:02:58:c7:57:b5:
4a:eb:01:1a:07:9b:d1:2f:a1:97:d5:d4:d9:7e:bc:eb:2a:a2:
e8:53:c6:ef:1d:5a:27:dd:d5:d3:ec:f5:13:5b:23:da:52:6e:
04:ea:bf:77:b4:1f:79:f5:35:54:ca:b1:79:1e:f5:37:08:39:
35:49:4e:1d:ec:df:58:92:c7:a0:10:b2:94:2f:f2:1d:92:7c:
d6:50:d8:b7:e1:dc:44:d8:40:8b:48:34:ed:f1:8f:cb:73:b8:
22:42:50:76:21:5b:4d:dd:d5:d3:75:92:aa:44:bf:82:a3:e0:
3f:cd:cc:49:de:93:d7:f5:99:b8:38:b2:ce:c4:4b:8e:b5:f2:
45:70:65:52:81:23:16:40:21:30:55:0f:34:fc:46:e1:fd:0f:
51:76:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:39 2025 by rpki-client